This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json) Hash identifier: mDFEhodAp0jc/zmwUyLHfa8BhQRElfi1QO/BFk2LiVA= Subject key identifier: AF:41:5C:D2:92:35:29:96:53:47:EE:C2:AD:DB:91:68:71:35:D5:90 Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26 Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226 Certificate serial: 019AF50A954A20FEDD2C28AE8401057E5538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft Manifest number: 1636 Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: hLJ2e/35jwrz6IjJlGNcKjLEhVuWy5+2TL+WOEHN5rg=) 2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:95:4a:20:fe:dd:2c:28:ae:84:01:05:7e:55:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226 Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=af415cd2923529965347eec2addb91687135d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:27:23:79:b3:20:59:2d:af:6e:14:42:16: 15:0f:41:23:cc:46:df:31:28:08:dc:c1:df:be:78: c6:d6:6d:3b:48:0c:00:86:c8:20:d2:34:e8:10:23: 74:9a:ae:d3:69:ff:81:2d:92:93:2a:58:34:4d:ef: 78:83:48:b6:fc:b6:91:5e:76:5c:a4:94:c4:00:bb: 22:82:5d:89:1c:76:c6:d4:9e:f0:66:da:44:00:84: 0c:f8:0f:67:c7:1e:c9:b3:ed:3f:4d:47:c8:46:14: f9:d2:44:f7:fc:21:c0:c2:d0:01:0b:3f:f7:19:e7: f6:e0:1d:56:96:c5:5c:58:07:90:35:ec:8d:7b:7a: bb:66:e6:81:c2:8e:7c:89:8b:a1:b8:e4:4e:18:0a: c2:cb:90:0a:1c:64:6c:32:f5:12:e6:9c:9c:28:16: 43:8e:fc:09:7d:ca:57:1f:ec:3c:a8:90:0b:33:db: c8:56:1a:b7:f2:2f:5e:a9:de:9b:ba:82:70:55:08: e2:0e:90:0d:ff:f7:d0:a4:a3:ca:bf:f9:82:12:0a: 4f:75:a7:78:bb:f3:79:06:10:dc:4d:86:7a:1c:97: a2:90:78:57:67:99:ab:e8:51:f7:7d:26:2f:e9:5a: d4:61:f7:96:69:05:d5:07:21:84:ef:e2:59:44:97: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:41:5C:D2:92:35:29:96:53:47:EE:C2:AD:DB:91:68:71:35:D5:90 X509v3 Authority Key Identifier: keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5b:4d:5e:31:7a:d2:23:33:4d:fb:ab:78:5c:e3:b1:90:d3: 5e:8e:3c:04:34:7d:f8:19:49:dc:12:62:a6:7a:fe:0a:5e:ea: 1b:2f:6e:a3:b3:da:b6:b6:43:36:ad:33:08:e4:00:db:f4:86: 9f:1c:6d:57:32:18:8d:b3:6a:da:2f:91:75:f8:6a:81:31:21: 3b:c6:e2:99:ce:33:17:f1:95:5b:fc:74:08:3a:fc:a7:77:4d: c8:0a:b2:76:b3:6a:c1:cc:d5:03:5f:c7:96:98:7b:94:69:bf: ee:28:e9:ef:fc:64:25:fa:32:ef:4b:69:61:0d:02:49:85:bf: 98:00:43:96:fe:83:e3:bb:6a:3e:0d:a5:49:de:a9:b7:f8:8e: 6f:92:e6:af:da:9c:28:33:7b:79:88:28:34:b4:dd:61:48:27: a3:4d:ae:69:05:a7:e3:c1:f7:75:1c:38:2e:7c:e5:d3:82:82: be:b9:57:00:a1:f7:1f:71:26:f8:22:24:47:d9:6a:48:00:1b: b9:ad:41:4c:da:98:dd:8c:87:83:04:57:05:92:6f:44:8a:73: a4:c7:ab:8f:62:ab:6a:21:5e:4b:52:80:fd:9d:5d:59:04:3a: 6b:4f:0c:fc:64:8a:00:ee:25:f8:09:f8:d6:d5:1d:79:4e:41: 6c:d0:3c:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpVKIP7dLCiuhAEFflU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTA5NTNhN2IzMDNkNmExZTlhMDI4NzE2MGMyZjQ2MGYw N2YyMjYwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD EyhhZjQxNWNkMjkyMzUyOTk2NTM0N2VlYzJhZGRiOTE2ODcxMzVkNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieQnI3mzIFktr24UQhYVD0EjzEbf MSgI3MHfvnjG1m07SAwAhsgg0jToECN0mq7Taf+BLZKTKlg0Te94g0i2/LaRXnZc pJTEALsigl2JHHbG1J7wZtpEAIQM+A9nxx7Js+0/TUfIRhT50kT3/CHAwtABCz/3 Gef24B1WlsVcWAeQNeyNe3q7ZuaBwo58iYuhuOROGArCy5AKHGRsMvUS5pycKBZD jvwJfcpXH+w8qJALM9vIVhq38i9eqd6buoJwVQjiDpAN//fQpKPKv/mCEgpPdad4 u/N5BhDcTYZ6HJeikHhXZ5mr6FH3fSYv6VrUYfeWaQXVByGE7+JZRJfCVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9BXNKSNSmWU0fuwq3bkWhxNdWQMB8GA1UdIwQY MBaAFEvglTp7MD1qHpoChxYML0YPB/ImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgt ZWU5NmQwZGYwMDAzLzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgtZWU5NmQwZGYwMDAz LzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1tNXjF6 0iMzTfureFzjsZDTXo48BDR9+BlJ3BJipnr+Cl7qGy9uo7PatrZDNq0zCOQA2/SG nxxtVzIYjbNq2i+RdfhqgTEhO8bimc4zF/GVW/x0CDr8p3dNyAqydrNqwczVA1/H lph7lGm/7ijp7/xkJfoy70tpYQ0CSYW/mABDlv6D47tqPg2lSd6pt/iOb5Lmr9qc KDN7eYgoNLTdYUgno02uaQWn48H3dRw4Lnzl04KCvrlXAKH3H3Em+CIkR9lqSAAb ua1BTNqY3YyHgwRXBZJvRIpzpMerj2KraiFeS1KA/Z1dWQQ6a08M/GSKAO4l+An4 1tUdeU5BbNA8vg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:05 2025 by rpki-client